Forum Discussion

RubenJZ's avatar
RubenJZ
Copper Contributor
Aug 10, 2022
Solved

KQL - Convert one object with different key value pairs to a list

Hi!

 

I have the following KQL:

 

tableName
| where TimeGenerated > ago(1h)
| project-rename State=State_s, Status=Status_s, startTime=startTime_t, itemsFailed=itemsFailed_d, itemsProcessed=itemsProcessed_d, name=name_s, durationInSec=durationInSec_d
| project TimeGenerated, Status, startTime, State,itemsFailed,itemsProcessed, durationInSec, name
| where itemsProcessed != 0
| summarize AvgItemsProccessed = round(avg(itemsProcessed)),
MinItemsProccessed = round(min(itemsProcessed)),
MaxItemsProccessed = round(max(itemsProcessed))

 

It returns:

 

 

How can I have a list instead?

 

I would like to get something like:

AvgItemsProcessed 17,369

MinItemsProcessed 16,900

MaxItemsProcessed 17,861

 

I experiented with make_list, mv_expand but with no luck.

 

Thanks in advance!

 

Ruben

Resources